private boolean getAnonymousResolver()

in src/main/java/org/apache/sling/auth/core/impl/SlingAuthenticator.java [883:924]

• 20 lines of code
• 4 McCabe index (conditional complexity)

    private boolean getAnonymousResolver(
            final HttpServletRequest request, final HttpServletResponse response, final AuthenticationInfo authInfo) {

        // Get an anonymous session if allowed, or if we are handling
        // a request for the login servlet
        if (isAnonAllowed(request)) {

            try {
                ResourceResolver resolver = resourceResolverFactory.getResourceResolver(authInfo);

                // check whether the client asked for redirect after
                // authentication and/or impersonation
                if (DefaultJakartaAuthenticationFeedbackHandler.handleRedirect(request, response)) {

                    // request will now be terminated, so close the resolver
                    // to release resources
                    resolver.close();

                    return false;
                }

                // set the attributes for further processing
                setAttributes(resolver, null, request);

                return true;

            } catch (LoginException re) {

                // cannot login > fail login, do not try to authenticate
                handleLoginFailure(request, response, new AuthenticationInfo(null, "anonymous user"), re);
                return false;
            }
        }

        // If we get here, anonymous access is not allowed: redirect
        // to the login servlet
        log.debug("getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials");
        doLogin(request, response);

        // fallback to no session
        return false;
    }